mplayer segfaulted while going forward while playing a mp3 file

[thierry.vignaud@…]

See original report at ​https://qa.mandriva.com/show_bug.cgi?id=60268

I was using mplayer-1.0-1.rc4.0.r31086.3plf2010.1 package on Mandriva Linux (using

r31086 SVN revision)

mplayer segfaulted while playing a mp3 file (while going forward)
See the GDB trace at ​https://qa.mandriva.com/attachment.cgi?id=17708 :

Program terminated with signal 11, Segmentation fault.
#0 II_step_two (outmode=<value optimized out>, fr=<value optimized out>) at mp3lib/layer2.c:167
167 real cm=muls[k][scale[x1]];
(gdb) bt
#0 II_step_two (outmode=<value optimized out>, fr=<value optimized out>) at mp3lib/layer2.c:167
#1 do_layer2 (outmode=<value optimized out>, fr=<value optimized out>) at mp3lib/layer2.c:304
#2 0x000000000067a045 in MP3_DecodeFrame (hova=<value optimized out>, single=<value optimized out>) at mp3lib/sr1.c:534
#3 0x00000000005551ba in filter_n_bytes (sh_audio=0x2629690, minlen=<value optimized out>) at libmpcodecs/dec_audio.c:390
#4 decode_audio (sh_audio=0x2629690, minlen=<value optimized out>) at libmpcodecs/dec_audio.c:468
#5 0x00000000004a2778 in fill_audio_out_buffers (argc=<value optimized out>, argv=<value optimized out>) at mplayer.c:2129
#6 main (argc=<value optimized out>, argv=<value optimized out>) at mplayer.c:3757
(gdb) print k
$2 = 6
(gdb) print scale[x1]
$3 = 1056981024
(gdb) print x1
$4 = <value optimized out>
(gdb) print muls[k][scale[x1]]
Cannot access memory at address 0xfcfd34f0

I wasn't able to reproduce the bug but I kept the core file.
Maybe could you pinpoint the bug in the code and fix it?

[t.artem@…]

Can you upload a problematic file somewhere?

[thierry.vignaud@…]

Honestly, 2 years after, I don't remember